pyth0n1c
|
a5a54def02
|
Branch was auto-updated.
|
2022-09-14 09:54:32 -07:00 |
|
pyth0n1c
|
fe1d286217
|
Branch was auto-updated.
|
2022-09-14 09:17:36 -07:00 |
|
pyth0n1c
|
5af60a2412
|
Branch was auto-updated.
|
2022-09-14 09:17:30 -07:00 |
|
patel-bhavin
|
96e81ef195
|
adding test file updates
|
2022-09-13 18:49:00 -05:00 |
|
patel-bhavin
|
7ae6ec7be1
|
search updates and datasets
|
2022-09-13 17:37:24 -05:00 |
|
patel-bhavin
|
fd475e9625
|
adding datasets
|
2022-09-13 15:33:46 -05:00 |
|
pyth0n1c
|
e807d51570
|
Branch was auto-updated.
|
2022-09-06 14:07:50 -07:00 |
|
pyth0n1c
|
1be4026031
|
Branch was auto-updated.
|
2022-09-06 14:07:47 -07:00 |
|
Rod Soto
|
73e84a326d
|
fixedpathlog
|
2022-09-06 13:40:08 -07:00 |
|
pyth0n1c
|
cca076f667
|
Branch was auto-updated.
|
2022-09-02 19:15:41 -04:00 |
|
pyth0n1c
|
9894bf1583
|
Branch was auto-updated.
|
2022-09-02 19:15:34 -04:00 |
|
pyth0n1c
|
5c4d054652
|
Update linux_kernel_module_enumeration.test.yml
Changing sourcetype from linux_sysmon --> sysmon_linux
|
2022-09-02 18:50:48 -04:00 |
|
tccontre
|
1557a528cf
|
brute-ratel-2
|
2022-08-31 10:12:55 +02:00 |
|
tccontre
|
b401ed9d50
|
brute-ratel-2
|
2022-08-30 13:08:04 +02:00 |
|
pyth0n1c
|
8046a7933e
|
Branch was auto-updated.
|
2022-08-26 11:42:38 -07:00 |
|
pyth0n1c
|
8f2a3bd754
|
Branch was auto-updated.
|
2022-08-26 10:01:45 -07:00 |
|
pyth0n1c
|
bd2d1515cb
|
Branch was auto-updated.
|
2022-08-26 10:01:42 -07:00 |
|
mvelazco
|
2a0c7a69d1
|
adding new detection
|
2022-08-25 16:02:54 -04:00 |
|
pyth0n1c
|
0ae64ea317
|
Branch was auto-updated.
|
2022-08-23 13:05:57 -07:00 |
|
pyth0n1c
|
4788d6c4e3
|
Branch was auto-updated.
|
2022-08-23 13:05:54 -07:00 |
|
pyth0n1c
|
7f5507a4c2
|
Branch was auto-updated.
|
2022-08-23 12:49:59 -07:00 |
|
pyth0n1c
|
80c9e04de8
|
Branch was auto-updated.
|
2022-08-23 12:49:55 -07:00 |
|
pyth0n1c
|
b1fc807d1c
|
Branch was auto-updated.
|
2022-08-23 12:49:52 -07:00 |
|
Michael Haag
|
8248278109
|
Remote Access Software
|
2022-08-22 21:57:53 -06:00 |
|
Michael Haag
|
13d400611a
|
LSA 🐍 SS
|
2022-08-22 21:16:12 -06:00 |
|
Michael Haag
|
fd88c88762
|
Hijack Libraries
|
2022-08-19 14:37:29 -06:00 |
|
d1vious
|
19f3a3b982
|
fixing on all places
|
2022-08-16 15:01:56 -04:00 |
|
mvelazco
|
b2332df9a0
|
Merge branch 'Update_Azure_Account_Takeover' of github.com:splunk/security_content into Update_Azure_Account_Takeover
|
2022-08-16 12:13:02 -04:00 |
|
mvelazco
|
d00a4b2ae6
|
updating detection yaml
|
2022-08-16 12:13:00 -04:00 |
|
pyth0n1c
|
8a72b522ac
|
Branch was auto-updated.
|
2022-08-16 08:40:57 -07:00 |
|
pyth0n1c
|
7d441871cb
|
Branch was auto-updated.
|
2022-08-16 08:40:56 -07:00 |
|
d1vious
|
b7e1a5fe94
|
adding new detections
|
2022-08-16 11:30:24 -04:00 |
|
gowthamarajr
|
6759feccd4
|
Add Azure AD Multi-Factor Authentication Disabled
|
2022-08-15 17:22:54 -04:00 |
|
pyth0n1c
|
31be7c1b3e
|
Branch was auto-updated.
|
2022-08-12 13:01:04 -07:00 |
|
gowthamarajr
|
ddf0db898d
|
Merge branch 'TR_2301' of https://github.com/splunk/security_content into TR_2301
|
2022-08-12 07:27:19 -04:00 |
|
gowthamarajr
|
bed8043fe8
|
Add 12 More detections (T1548)
|
2022-08-12 07:27:16 -04:00 |
|
pyth0n1c
|
084d711188
|
Branch was auto-updated.
|
2022-08-11 12:16:22 -07:00 |
|
pyth0n1c
|
9379ece487
|
Branch was auto-updated.
|
2022-08-11 12:16:14 -07:00 |
|
pyth0n1c
|
742d674a89
|
Branch was auto-updated.
|
2022-08-11 11:30:14 -07:00 |
|
pyth0n1c
|
2eb9bf40de
|
Branch was auto-updated.
|
2022-08-11 11:30:10 -07:00 |
|
pyth0n1c
|
0136017be3
|
Branch was auto-updated.
|
2022-08-11 11:30:09 -07:00 |
|
Bhavin Patel
|
74ece59913
|
Merge pull request #2309 from splunk/tatertots
Haag it!
|
2022-08-11 11:29:48 -07:00 |
|
patel-bhavin
|
8d25d3d27a
|
getpassworddata
|
2022-08-10 16:03:18 -07:00 |
|
mvelazco
|
5579f1ebdb
|
adding new detection
|
2022-08-10 13:34:18 -04:00 |
|
gowthamarajr
|
51693e4ba5
|
Add T1548.003
|
2022-08-10 06:58:54 -04:00 |
|
gowthamarajr
|
3cc956cd99
|
Add AWS Credential Access detections
|
2022-08-08 01:47:33 -04:00 |
|
gowthamarajr
|
29a61f8cb6
|
Add detections for Awk, Node, Docker Lotl
|
2022-08-02 16:23:31 -04:00 |
|
Michael Haag
|
83e57921ad
|
iscsi fix
|
2022-08-02 08:35:54 -06:00 |
|
tccontre
|
44517188c1
|
Rename windows_ingress_tool_transfer_using_explorer_exe.test.yml to windows_ingress_tool_transfer_using_explorer.test.yml
|
2022-08-01 14:22:35 +02:00 |
|
tccontre
|
7ef8d1dadf
|
Update windows_ingress_tool_transfer_using_explorer_exe.test.yml
|
2022-08-01 14:18:38 +02:00 |
|